Hello there VyOS guru’s,
I’ve been struggling with this question for a while now, so I thought lets see if there is an answer to be found in this forum. I can’t imagine I’m the only one trying to to this.
So here goes,
We have multiple ISP’s, each ISP has its own VyOS Firewall connected to public and transit
Transit has a number of VyOS router clusters connected to it, each represents a separate group. the clusters are connected to transit and vnetX. Now in the vNet there is a mail server (or something else), MX in the drawing attached. The routes in the transit are distributed through a simple OSPF (single area 0.0.0.0)
Now in DNS we set MX1,MX2 and MX3 to each different internet connection / firewall, and NAT that through to the MX in the vNet. Unfortunately incoming traffic from FW2 or FW3 it does not return, since the outbound route goes through FW1, hence for some reason the return traffic does not go back through the route it was originated from.
So my question is, how do I get this to work? what am I missing here.
I’v e sketched up a diagram to illustrate the above, any suggestions would be appreciated. thanks!